5047 matches found
CVE-2016-1307
The Openfire server in Cisco Finesse Desktop 10.51 and 11.01 and Unified Contact Center Express 10.61 has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085...
CVE-2016-1302
Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03h and 1.1 before 1.11j and Nexus 9000 ACI Mode switches with software before 11.03h and 11.1 before 11.11j allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...
Sql injection
SQL injection vulnerability in Cisco Unified Communications Manager 10.52.13900.9 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227...
CVE-2015-6398
Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...
Hardcoded credentials
The Openfire server in Cisco Finesse Desktop 10.51 and 11.01 and Unified Contact Center Express 10.61 has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085...
Design/Logic Flaw
Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...
Cross site scripting
Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML entities, aka Bug ID CSCux15511...
Design/Logic Flaw
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1112 and Cisco Prime Security Manager PRSM software before 9.3.1.1112 allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842...
CVE-2016-1308
Cisco Unified Communications Manager (UCM) 10.5 (10.5(2.13900.9)) is affected by a SQL injection vulnerability that arises from lack of input validation in the SQL database interface, allowing an authenticated, remote attacker to execute arbitrary SQL commands via a crafted URL. Public sources ti...
CVE-2015-6398
Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...
CVE-2016-1307
CVE-2016-1307 affects Cisco Finesse Desktop and Cisco Unified Contact Center Express Openfire server. A default, non-changeable XMPP account enables unauthenticated remote login to the Openfire service, allowing access via XMPP with a non-administrative account. Cisco’s advisory Cisco Security Ad...
CVE-2016-1308
SQL injection vulnerability in Cisco Unified Communications Manager 10.52.13900.9 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227...
CVE-2016-1307
The Openfire server in Cisco Finesse Desktop 10.51 and 11.01 and Unified Contact Center Express 10.61 has a hardcoded account, which makes it easier for remote attackers to obtain access via an XMPP session, aka Bug ID CSCuw79085...
CVE-2016-1310
Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033...
CVE-2016-1306
Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...
Cross site scripting
Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...
Cross site scripting
Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033...